Unscored severity · published Dec 31, 2005
CVE-2005-3655
Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code…
–
CVSS
5.7%
EPSS
No
On KEV
Description
Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OE
Open Enterprise Server · Novell
9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3655
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3655
secunia.com
http://secunia.com/advisories/18484
securityreason.com
http://securityreason.com/securityalert/348
securitytracker.com
http://securitytracker.com/id?1015487
Exploit
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=371
www.novell.com
http://www.novell.com/linux/security/advisories/2006_02_novellnrm.html
www.osvdb.org
http://www.osvdb.org/22455
More from Open Enterprise Server
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
7.8
CVE-2013-2016
A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device
7.8
CVE-2009-0115
The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly…
7.5
CVE-2017-5182
Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory…